Vulnerabilidades en microsoft

9312 resultados
Análisis Vexday

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2026-50380CRITICALWindows GDI+ Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-50474HIGHRemote Desktop Client Remote Code Execution VulnerabilityEPSS 0.6%CVE-2024-28919MEDIUMSecure Boot Security Feature Bypass VulnerabilityEPSS 0.6%CVE-2024-49072HIGHWindows Task Scheduler Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2024-20669MEDIUMSecure Boot Security Feature Bypass VulnerabilityEPSS 0.6%CVE-2023-21572MEDIUMMicrosoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityEPSS 0.6%CVE-2024-38086MEDIUMAzure Kinect SDK Remote Code Execution VulnerabilityEPSS 0.6%CVE-2023-36408HIGHWindows Hyper-V Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2026-46383MEDIUMMicrosoft APM: Windows absolute-path tar member overwrite during legacy-bundle probing in `apm install`EPSS 0.6%CVE-2026-57089HIGHWindows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution VulnerabilityEPSS 0.6%CVE-2023-36719HIGHMicrosoft Speech Application Programming Interface (SAPI) Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2023-24891MEDIUMMicrosoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityEPSS 0.6%CVE-2026-24304CRITICALAzure Resource Manager Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2023-21570MEDIUMMicrosoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityEPSS 0.6%CVE-2022-24488HIGHWindows Desktop Bridge Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2022-41096HIGHMicrosoft DWM Core Library Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2022-24496HIGHWindows Local Security Authority (LSA) Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2023-21573MEDIUMMicrosoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityEPSS 0.6%CVE-2023-24879MEDIUMMicrosoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityEPSS 0.6%CVE-2023-24921MEDIUMMicrosoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityEPSS 0.6%